Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
File: U7MsWuoesSCyjxNNrLIARIHOD7E.mft (raw, json)
Hash identifier: SPAgIkYugBXYxNKp7/OgHGReGu7nPv2rNmTB6AbDe+E=
Subject key identifier: F3:13:03:F7:02:1E:5B:4F:AC:1E:CF:34:D0:5A:83:88:0A:7C:0B:13
Authority key identifier: 53:B3:2C:5A:EA:1E:B1:20:B2:8F:13:4D:AC:B2:00:44:81:CE:0F:B1
Certificate issuer: /CN=53b32c5aea1eb120b28f134dacb2004481ce0fb1
Certificate serial: 01A0C9D8B32532622388C3462A72B696095F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
Manifest number: 3D
Signing time: Tue 22 Sep 2026 16:00:16 +0000
Manifest this update: Tue 22 Sep 2026 16:00:16 +0000
Manifest next update: Wed 23 Sep 2026 16:00:16 +0000
Files and hashes: 1: U7MsWuoesSCyjxNNrLIARIHOD7E.crl (hash: 1oYd77IfYm06T3UX+mbiYtcUZPaYPctIML3I1DYgtzs=)
2: oP0i5tSjJpPnw7rZtnRJyU5Q4vU.roa (hash: wSIal4fPSrIdhNkTAud1pbA+N7pOXY7jxLrkWLCn7Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:b3:25:32:62:23:88:c3:46:2a:72:b6:96:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b32c5aea1eb120b28f134dacb2004481ce0fb1
Validity
Not Before: Sep 22 16:00:16 2026 GMT
Not After : Sep 23 16:00:16 2026 GMT
Subject: CN=f31303f7021e5b4fac1ecf34d05a83880a7c0b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:02:24:db:9d:99:e8:50:8c:20:fe:2c:ef:
96:c9:24:11:b8:ce:34:d0:e9:6e:f3:06:dd:db:f4:
47:e5:1c:89:e3:48:fa:87:0a:2b:aa:fb:0e:bf:58:
6c:95:92:0d:74:26:24:97:2f:b2:7c:6e:8f:00:06:
65:40:f8:b9:c9:fd:a2:60:ed:08:cd:fd:fe:6a:a2:
6b:4c:41:72:3f:86:30:f8:e9:0f:0d:be:35:3b:d2:
11:23:5d:24:15:eb:3d:cc:8d:59:4b:23:fb:2e:6c:
4d:b3:47:e6:52:f7:07:f9:28:1e:15:31:62:53:a0:
16:ca:5d:c7:39:e1:4e:12:75:d2:a8:97:94:6e:93:
9c:ab:c8:b0:ba:5e:22:e9:ce:f6:fe:48:a7:bb:c0:
26:33:46:06:f2:28:16:a1:c0:5b:26:c3:51:79:14:
93:f7:be:20:5b:c0:33:d0:3e:75:5f:cf:e8:5a:9e:
7f:1d:90:f9:1e:d9:b2:7c:81:de:af:75:7f:65:97:
45:2e:0b:44:89:07:45:a5:2d:46:89:ea:0b:2c:11:
0e:92:92:81:bf:1d:d0:fa:b4:df:ab:cc:2d:b8:01:
09:97:0c:5a:b2:9a:b7:61:3a:99:03:d0:0f:ac:46:
85:05:62:73:f1:e9:f6:c0:67:5e:2c:76:5e:33:a6:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:13:03:F7:02:1E:5B:4F:AC:1E:CF:34:D0:5A:83:88:0A:7C:0B:13
X509v3 Authority Key Identifier:
keyid:53:B3:2C:5A:EA:1E:B1:20:B2:8F:13:4D:AC:B2:00:44:81:CE:0F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e5:b6:a0:94:8f:b0:7d:e7:65:85:05:5a:79:13:63:13:3f:
20:74:06:ca:b2:31:ea:8b:ae:46:9c:ab:98:bb:39:b2:9e:d6:
15:ab:b6:60:b3:05:60:0f:17:7a:6f:47:d8:2f:ff:db:0a:77:
f1:e0:12:e1:c1:cb:59:60:fa:9b:2c:bc:74:70:11:d1:96:8f:
93:3d:7a:91:77:d5:5c:c4:7c:39:ef:22:7d:8c:ae:b2:e1:ce:
ac:ce:1b:1f:74:ec:28:68:00:7b:81:80:5f:29:dc:99:f9:2f:
c4:99:b4:d1:a8:a8:2d:57:b9:5c:a6:38:2c:57:c2:3e:b5:00:
79:be:4f:cb:79:ea:ce:bd:5a:92:c0:8b:9d:1e:ea:f0:9e:52:
9b:bc:9b:d3:ef:81:b7:41:45:e3:fa:f0:e4:2c:41:a2:c6:86:
0d:bc:d8:5e:d6:d1:e2:8f:ae:21:e2:3f:e9:5e:db:76:11:fa:
aa:b7:e8:f7:1e:fa:dd:5b:26:aa:b3:56:9c:4a:6c:ad:ce:40:
38:fa:4c:5b:45:a2:30:fb:f6:76:cd:be:7a:35:bf:6c:21:ff:
8f:4f:46:9b:59:49:ed:74:47:e1:9f:60:c6:db:02:3e:6f:04:
9a:b8:2f:3e:3e:2c:fe:71:1b:66:df:04:3f:ad:3a:8a:24:88:
dd:c5:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:02:53 2026 by rpki-client